Open source tools and DFIR Tryhackme equivalents

I love learning about Pentesting and DFIR, but something I've noticed is that hacking has way more open source options and better learning material. Pentesting has so many amazing cheap hands-on learning resources, DFIR on the other hand has none that I know of. DFIR seems like the only way forward is to learn SANS ($$$). Don't get me wrong, I know things like the Sleuth Toolkit exists. I just don't know where to get hands-on experience with it in …

computerforensics dfir open source open source tools tools tryhackme